IPsec AH failure over IPv6

From: Steven Davy
Date: Fri Nov 21 2003 - 04:08:07 EST


Im running performance tests using netperf (patched for ip6) across two
machines, ESP works great but AH works really bad, practally all the packets
are droped. Tcpdump reads the packets but they are not passed on to netperf.
Read somewhere the IPsec Ah doesent like fragmentation over tcp, but im not
sure. Im using manual keying, and the 2.5.75 kernel. Is there a kernel patch
to fix this!!


regards
steven

TSSG WIT Waterford

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/